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(54) Cellular telephone as an authenticated transaction controller 



(57) The Invention includes arrangements for pro- 
viding credit to customers via cellular telephones. In one 
embodiment, a customer seeking credit for the pur- 
chase of goods and services from a merchant (at 30) 
activates his or her cellular telephone (10), authenti- 
cates the cellular telephone with his cellular service pro- 
vider's base station (20), and proceeds to establish a 



connection (to 40) to obtain credit. Oedit is obtained by 
sending a unique sequence to the c;ellular service pro- 
vider that is different from the normail sequence of num- 
bers that correspond to a telephone mumber of the called 
party. That sequence may include aa merchant ID code 
and the amount of credit desired. 
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Description 

Background Of the Invention 

This invention relates to wireless telepliones and 
processes for use of such a telephone to secure action 
on behalf of the telephone's holder. 

Today, wireless telephones are used exclusively for 
telecomnnunication, while other devices are used to se- 
cure action on behalf of a user. For example, Infra-Red 
remote control devices are used to control TVs and 
VCRs; house keys are used to secure entry to a premis- 
es, credit cards are used to obtain consumer credit, etc. 
All of these activities can be classified as "control trans- 
actions", because control is exercised by the user to ob- 
tain some desired result or benefit. Some of those trans- 
actions are free, such as securing entry to one's own 
home or controlling the reception of free channels of a 
TV. Others are not free, such as securing entry to a 
theater, selecting a "pay per view" TV channel, obtaining 
consumer credit, etc. 

It is an object of this invention to allow users to em- 
ploy their wireless telephones to effect such control 
transactions; and in connection with control transactions 
that are not free, it is an object of this invention to allow 
the cost of such control transactions to be borne by the 
credit account that the wireless telephone holder has 
with the wireless service provider or another party. 

Summary of the invention 

In accordance with the principles of this invention, 
wireless telephones are used to secure action on behalf 
of a user and form, thereby, transaction controllers. The 
procedure is grounded in the authentication protocol 
that wireless telephones engage in when activated. 
Once the wireless telephone is authenticated, a control 
command is issued by the telephone (or effectively by 
the telephone) and, if necessary, a credit sum is author- 
ized to be debited against the credit account that the 
wireless telephone holder has with the wireless service 
provider 

In applications where consumer credit is sought to 
be received, for example, a customer seeking credit for 
the purchase of goods and services from a merchant 
activates his or her wireless telephone, authenticates 
the wireless telephone with his wireless service provid- 
er's through the local base station, and proceeds to es- 
tablish a "conversation" to obtain credit. Credit is ob- 
tained by sending unique sequence to the wireless serv- 
ice provider that may be different from the normal se- 
quence of numbers that correspond to a telephone 
number of the called party. That sequence may include 
a merchant ID code (which identifies the merchant) and, 
of course, the amount of credit desired. It may also in- 
clude other information, such as the items purchased or 
service received, etc. 

In another embodiment, radio reception equipment 



of the merchant intercepts the inforrmation sent to the 
base station, appends information sabout the merchant 
and the amount of credit desired, arnd fonwards that in- 
formation to the credit-providing orgaanization; i.e. the or- 

s ganization that holds the account cof the wireless tele- 
phone's holder. The communication i with the credit-pro- 
viding organization may take placte through wireless 
transmission or through landline trainsmission. 

When the request for credit is; deemed proper, a 

10 message is sent to the merchant, aujthorizing the exten- 
sion of credit, and the transaction teerminates success- 
fully. 

In an application where the contrrol transaction does 
not need to access the credit line CDf the wireless tele- 

'5 phone holder, and where only authtentication is impor- 
tant - such as when using the wirreless telephone to 
open the garage door to one's home?, the random signal 
of a wireless base station is combin^ed to send a signal 
that can be authenticated. When it lis so authenticated, 

20 the control transaction is executed. 

Brief Description of the Drawing 

FIG. 1 depicts an arrangement for carrying out the 
25 objectives set forth above; 

FIGS. 2 - 4 present flow diagranms of illustrative pro- 
tocols that incorporate the pirinciples disclosed 
herein; 

30 

FIGS. 5-6 show flow diagrams fcor a secured control 
application; and 

FIG. 7 illustrates a home conttroller base station 
35 arrangement. 

Detailed Description 

For illustrative and expository piurposes, the disclo- 
se sure herein begins by describing the? process of extend- 
ing and obtaining consumer credit, w/here authentication 
and exchange of value are pararmount. Then, it de- 
scribes the process of gaining accesss to a home, where 
authentication is essential. Finally, it describes the proc- 
45 ess of controlling appliances, such as a TV, where only 
command and control capabilities aire the primary con- 
cerns. The description below deaiss with cellular tele- 
phones and the protocols that are fadapted for cellular 
telephones. It should be understood, however, that the 
50 instant invention is broader than the use of cellular tel- 
ephones, as compared to other wireless telephones. 

1. Extending Credit 

55 Today, the process of extending consumer credit is 
a fairly mundane operation. An orgsanization such as a 
bank offers credit to a customer, provides the customer 
with a credit card, and the customer luses the credit card 
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to purchase goods and services. When goods and serv- 
ices are purchased, a charge is nriade against the cus- 
tomer's credit, at the end of a billing cycle the organiza- 
tion sends out a statement to the customer and, in due 
course, the customer compensates the organization for s 
the credit that it extended. 

Of course, a person wishing to get a credit card 
needs to find an organization that would extend this 
credit. But, while finding an organization that would ex- 
tend credit is not a particularly difficult hurdle for many io 
people, it bears pointing out that most credit customers 
already have a creditor/debtor relationship with two or 
more communication carriers (local exchange service, 
long distance carrier, cellular carrier). The question aris- 
es, then, whether this prevalent relationship can be used ^5 
to extend general consumer credit. Now that an increas- 
ing number people are carrying cellular telephones, it 
would certainly be advantageous to make use of this re- 
lationship and do away with credit cards altogether 

The arrangements and processes described below 20 
provide this capability. 

FIG. 1 depicts a cellular telephone 10 that is adapt- 
ed for wireless communication with a base station 20, 
Base station 20 communicates with a credit center 40, 
and credit center 40 communicates with merchant's 25 
equipment 30. Base station 50 also communicates with 
credit center 40. 

Credit center 40 and the cellular service providers 
that operate base stations 20 and 50 can be one and 
the same organization, but they need not be. Typically, 30 
credit center 40 is the billing arm of the organization that 
provides the cellular service to the user. For example, 
base station 20 can belong to cellular service provider 

A, base station 50 can belong to cellular service provider 

B, and the bona f/'de holder of cellular telephone 10 has 35 
a contractual relationship with provider B. Under these 
assumptions, center 40 is the billing organization of pro- 
vider B. 

Also, channel 21 which connects equipment 30 to 
credit center 40 can be wired or wireless. Any conven- 40 
lent protocol can be employed for communicating be- 
tween equipment 30 and credit center 40, provided that 
secure authentication can take place. 

The basic transaction in the context of obtaining 
consumer credit Is for cellular telephone 1 0 to charge a ^5 
chosen amount to its account with credit center 40 and 
to inform a merchant that he/she will get the benefit of 
this charging against the telephone holder's account. It 
is presumed that cellular telephone 10 is in the hands 
of a bona fide customer. The protocol that one might en- 50 
gage when there is a doubt regarding the bona fide of 
the person possessing the cellular telephone is not de- 
scribed here, for sake of brevity. It may include, for ex- 
ample, use of a customer personal identification code, 
voice authentication, etc. It is recognized, however, that 55 
one of the challenges is to insure that both the customer 
and the merchant to receive the benefit of the extended 
credit. Another challenge is to provide this interaction in 



a secure manner so that neither thie customer nor the 
merchant can be disadvantaged, Stilll another challenge 
is to provide this interaction so that a third party can not 
be disadvantaged by, or take advant^age of, this commu- 
nication. 

These objectives are realized wnth the protocol pre- 
sented in FIG. 2, which generally foUlows the teachings 
found in U.S. Patent 5.204.902, issiued to Reeds et al 
on April 20. 1993. This patent is hereeby incorporated by 
reference. 

To briefly describe the teachinggs of the Reeds et al 
patent, each cellular telephone posstesses a "shared se- 
cret data" (SSD) digital data string tthat is derived from 
a hashed combination of a secret k(ey (A-key), the cel- 
lular telephone's equipment numberr (ESN), the cellular 
telephone's assigned number (MINI), and a random 
string that is selected by the organizcation with which the 
cellular telephone user has a businesss relationship. Typ- 
ically that organization is a cellular stervice provider with 
whom the customer "signed up"; i.e?,, maintains a con- 
tractual relationship to pay for accruied charges. 

Cellular service providers are lusually limited to a 
particular geographic area. That aresa is the "home" cel- 
lular geographic service area (homej CGSA) of that cus- 
tomer. For purposes of this descripticon, the home CGSA 
of cellular telephone 10 is base statiion 50. Base station 
20, in whose cell cellular telephone '10 is present, is the 
"visited" host CGSA. The SSD strincg is divided into two 
strings, the SSDA and SSDB. The SSDA string is used 
for authentication, and the SSDB strring is used for com- 
munication encryption. 

In operation, each cell in a cellLular communication 
network is serviced by a base stationi (e.g., base stations 
20 and 50). The base station broaddcasts a random se- 
quence (RAND) at some selected irepetition rate, and 
changes that RAND relatively often Ifor enhanced secu- 
rity (e.g. more often than the duratiion of most cellular 
calls). When a cellular telephone thaat is located in a cell 
is turned on, it receives the RAND) sequence and re- 
sponds by introducing itself to the ceell (telephone 10 re- 
ceives the RAND transmitted by baise station 20). This 
is the registration process, and it ks depicted by lines 
(processes) 11, 12 and 13 in FIG. 21. 

Describing processes 11. 12 amd 13 more specifi- 
cally, the cellular telephone concateanates its ESN and 
MINI strings with the SSDA and thej RAND strings, and 
hashes the resulting string to obtaini the AUTHR string. 
It then transmits the AUTHR strincg together with the 
RAND, ESN and MINI strings to t^he base station for 
confirmation. As an aside, the RANID signal is sent be- 
cause the base station may have chsanged its RAND be- 
tween the time RAND was receiveed by cellular tele- 
phone 10 and the time AUTHR is re^ceived by the base 
station; but that is optional because tthe base station can 
easily remember its last RAND strimg. 

The base station detects the ESJN and MINI strings 
and determines therefrom the assesrted identity of the 
cellular telephone and the identity of the home CGSA. 
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As an aside, in order to identify the home CGSA an al- 
gorithnn may need to applied to the ESN and MINI 
strings, or a database may need to be consulted. Base 
station 20 receives the SSD string from the home CG- 
SA, which in the FIG. 1 example is base station 50, com- 
bines the SSDA with the RAND. ESN and MINI strings, 
and hashes the resulting string to obtain its version of 
an AUTHR string. It then compares its version of the AU- 
THR string to the received version of the AUTHR string. 
When the two strings match, a determination Is made 
that the cellular telephone Is bona fide. A "go ahead- 
signal (line 1 3) is then sent from the base station to the 
cellular telephone, and it includes information regarding 
the specific frequency the cellular telephone should use 
for further communication. 

Having been registered by the sen/ing base station, 
the cellular telephone can initiate calls with a process 
that concatenates at least some of the called party's 
phone number to the other strings. That is, the cellular 
telephone may transmit a MIN3 string, which is the 
called party's Information, together with the RAND, 
ESN, MINI strings, and a new AUTHR string. The new 
AUTHR string is derived from a hash of the concatena- 
tion of RAND, ESN, MINI, MIN3 and SSDA. (This is not 
shown is FIG. 2 because there is no call made to a third 
party.) 

Once the conversation is established with the base 
station, actual communication of information can pro- 
ceed - encrypted with SSDB, if desired. To further pre- 
serve security, the base station can request a re-authen- 
tication at any time, in a manner not unlike the initial reg- 
istration described above. 

Returning to the challenge of obtaining consumer 
credit to the holder of cellular telephone 10, the most 
elemental protocol that is required in order to grant credit 
and charge an account of that user in credit center 40, 
includes the steps of: 

a) communicating to credit center 40 and giving it 
the necessary information regarding the account to 
be charged, and the sum that should be charged to 
that account, and 

b) Informing the merchant, through merchant's 
equipment 30, that the merchant will be credited 
with the requested sum. 

Advantageously, additional steps can be Incorporated 
to insure that the right account is charged with the pro- 
vided credit, that the right merchant is credited with the 
requested sum, and that no interlopers can cause 
present or future harm to the merchant, to credit center 
40 or to the user of cellular telephone 10. etc. 

In one of its simpler forms, the detailed protocol in- 
cludes the following steps. 

a) The merchant provides to the customer a unique 
code that identifies the merchant to credit center 40 



(line 18 in FIG. 2); 

b) The customer presses into tellephone 10 a prefix, 
such as '•*9", the merchant's ID» code, and the sum 

s of money that should be chargesd to the customer's 
account and credited to the mesrchant. That forms 
the string MIN2. 

c) Cellular telephone 10, havimg been previously 
10 registered with base station 1 0 sand having the data 

of step (b) entered into its bufferr, in response to the 
"send" command transmits the rMlN2. RAND, ESN, 
MINI and AUTHR strings, wherre the AUTHR string 
is derived from a hash of thee concatenation of 
IS RAND, ESN, MINI , MIN2 and SJSDA (line 1 4 in FIG. 
2). 

d) When base station receives thie transmitted infor- 
mation, it recognizes (e.g., fromi the ''*9" string) that 

20 this is not a normal call but, rathcer, an effort to reach 
credit center 40. In response, cetnter40 is contacted 
and the relevant information is cconveyed; that is, the 
ESN, MINI and MIN2 data (line 17 in FIG. 2). The 
authentication protocol of baste station 20 effec- 
ts tively insures that cellular telephone 10 is indeed 
the telephone corresponding too the received ESN 
and MINI and, therefore, centejr 40 is in a position 
to evaluate whether the customsBr of Ml N1 deserves 
to get credit. 

30 

e) When credit center 40 detenmines that telephone 
10 should be granted the ctredit, it sends an 
approval code to merchant's eequlpment 30 and, 
perhaps, to the cellular telephome as well (lines 15 

35 and 16 in FIG. 2). Reception otf the approval suc- 
cessfully accomplishes the d^esired transaction. 
The actual posting of the crediJit against the cus- 
tomer's credit account can be dcone in conventional 
ways, and it can also be done by 'changing the billing 

40 rate of the communication withi cellular telephone 
10, as Is done in "900 service". 

One slight awkwardness with tHie above-disclosed 
protocol is that the merchant needs; to provide the cus- 

45 tomer with its code, and if this step is; carried out through 
oral communication then it is expeccted that errors will 
occur. Additionally, the fact that crecdit center 40 needs 
to contact merchant's equipment is5 a slight disadvan- 
tage because that entails use of a dJatabase that trans- 

50 lates the merchant's code to (typHcally) a telephone 
number, and the process of establisfching a communica- 
tion path takes additionally time. 

These deficiencies are overconme with a slightly al- 
tered approach where the merchsant contacts credit 

55 center 40 - rather than the other 'way around ~ and 
where the merchant electronically ssupplies its identifi- 
cation code to the credit center. Of c:ourse, the commu- 
nication between telephone 10 and I center 40 via base 
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station 20 must be linked to (in the sense of being cor- 
related with) the communication between merchant 30 
and center 40. The link can be established by the mer- 
chant and the customer agreeing to use a selected 
transaction password (TP string). This string can be ran- s 
dom and transitory; e.g., used only once. The customer 
can enter the TP string Instead of the merchant's ID 
code and send that to base station 20, and the merchant 
can use the same TP in the merchant's communication 
with credit center 40. The TP string can be communicat- io 
ed from the merchant to the customer orally with the 
customer inserting that code into the cellular telephone. 
This eliminates the danger of a nearby cellular tele- 
phone inadvertently participating in the communication 
and having its credit account debited. Since the TP ^5 
string is used only once, there is no value to it for an 
interloper, and an error in this step merely causes the 
transaction to fail in a very clear manner. When that hap- 
pens, the customer and the merchant can re-enter the 
TP string (or a different TP string) and try again. 20 

In accordance with this modified protocol, the tele- 
phone's communication is as before. The difference lies 
in the fact that the merchant's equipment contacts the 
credit center, identifies itself, provides the TP string and, 
when appropriate, receives the approval, or authoriza- 25 
tion, from the center. 

To help credit center 40 link the TP string provided 
by the merchant to the transmission by telephone 10. it 
would be advantageous for merchant's equipment 30 to 
include the ESN and MINI of telephone 10. This proto- 30 
col is presented in FIG. 3. 

Of course, equipment 30 must receive the ESN and 
MINI information from telephone 10, and that can be 
achieved with a receiver 31 associated with equipment 
30. Such a receiver can be a low-sensitivity receiver. 35 
because the customer purchasing the goods and serv- 
ices is expected to be in close proximity to the receiver 
and because the merchant indeed desires to not receive 
transmission from neighboring cellular telephones. 

Reception ofjust the right cellular telephone can be 
assured by more than just employing a weak receiver. 
For example, the receiver of equipment 30 can be set 
to discard all receptions from cellular telephones that do 
not transmit the TP string. Or, equipment 30 can include 
a metallic shroud 32 around an antenna 31 into which ^5 
the antenna of telephone 10 is inserted, causing only 
that signal to be received by antenna 31 . 

With receiver 31 introduced into equipment 30. 
communication between telephone 10 and base station 
20 need not necessarily take place or, in any event, need 5o 
not necessarily take place directly . That is, equipment 
30 can capture the transmission of telephone 10, add 
whatever data it desires, and forward the combined in- 
formation to credit center 40 via base station 20 (using 
path 22 in FIG. 1). Alternatively, equipment 30 can by- 55 
pass base station 20 and send its data directly to credit 
center 40 where preprocessor 42 receives the data and 
emulates the registration process of base station 20. As 
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depicted in FIG. 4, merchant's equip)ment 30 can obtain 
the RAND string from preprocessoir 42 and send it to 
wireless telephone 10. Concurrentivy, the merchant can 
give the TP string to the user of wireeless telephone 10. 
Wireless telephone 10 creates a sttring that comprises 
the transaction password string (TP)), the ESN and Ml N1 
strings, optionally the MIN2 string, sand AUTHR valida- 
tion string (i.e., the TP string is embeedded in the AUTHR 
string). Equipment 30, in turn, comnmunicates that infor- 
mation to preprocessor 42, adding; the TP string, the 
sum, its ID code and, perhaps, thet RAND string. Pre- 
processor 42 confirms the bona fidetot the user request- 
ing credit by analyzing the AUTHR; string vis-^-vis the 
other data sent by equipment 30 andJ determines wheth- 
er to grant credit. Its decision is thetn communicated to 
equipment 30 and. optionally, to wireeless telephone 10. 
A written confirmation of the amount : charged to the cus- 
tomer's account can be had from a [printout provided to 
the customer by the merchant and, iif desired, the print- 
out can be signed by the customer ffor a backup valida- 
tion of the charge. Such a printer is sshown as device 33 
in FIG. 1. 

In terms of the hardware needed for the system of 
FIG. 1, the equipment is completely/ conventional. Cel- 
lular telephone 10 is a conventional I cellular telephone, 
and so are base stations 20 and 50. The merchant's 
equipment is simply a receiver that lis akin to, but much 
simpler than, the receiver in base staation 20. All it needs 
to do is discriminate in its receptiom of signals in favor 
of the right incoming signal. In this cease, it is expected 
that the cellular telephone of the ctustomer wishing to 
make a purchase will be at least twvlce as close to the 
merchant's receiver than the next nejarest active cellular 
telephone. Shroud 32 would make isuch discrimination 
error more effective. Therefore, a diiscrimination based 
on incoming power would be simple cand effective. It may 
be remembered, however, that suchn discrimination can 
be also had by simply confirming titiat the TP string is 
contained in the communication fromn cellular telephone 
10. That would require the cellular ttelephone to output 
the TP string "in the clear" as well ajs embedded in AU- 
THR. 

In addition to the receiver, merchnant's equipment 30 
requires a means for appending infformation to the re- 
ceived data and sending that data Ito credit center 40. 
Such equipment can be realized eaasily with a conven- 
tional PC, or with even less versatile •■ and less expensive 
special hardware arrangements. Thee printer can be any 
of the printers commonly used toda^y in connection with 
conventional credit cards. 

As for credit center 40, it is mosttly a communication 
and database hub that is not unlike ^present day cellular 
providers' business offices. 

2. Coming Home 

After a shopping trip such as i intimated above, a 
holder of cellular telephone may wi^h to gain access to 
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his or her home by having the garage door open under 
control of the sanne cellular telephone. For this purpose, 
credit center 40 need not be involved because credit is 
not being extended (except, of course, If a charge is in- 
curred for the contributions nnade to this control trans- s 
action by the base station). While the outlined task is 
one of mere control over the garage door opener, as de- 
scribed below it can still involve telecommunication, al- 
though that is not a requirement. 

In a telecommunication embodiment, a garage door io 
opener is merely a cellular telephone receiver followed 
by an additional deciphering means. In operation, the 
garage door opener is registered with the cellular base 
station, and the base station is capable of installing 
therein the SSDA and the SSDB strings. In short, the ?5 
base station can communicate with the garage door 
opener in a secure manner, almost as with other cellular 
telephones; the difference being that it is only one way 
communication - from the base station to the garage 
door receiver. 20 

When the cellular telephone 10 wishes to have the 
garage door opened, it requests the base station to 
make a call to the garage door receiver and forward to 
that receiver a command data string. The data string 
comprises a random number (RANDX) that is "punched 25 
in" by the holder of the cellular telephone (that is the TP. 
transaction password, for this transaction) and a hash- 
ing of that random number with key (B-Key) which is 
stored in cellular telephone 10. 

As indicated above, the receiver contains a deci- 30 
phering means that recovers the string that had been 
hashed with the B-Key. When the deciphered random 
number corresponds to the random number received "in 
the clear" , the garage door is opened. This protocol is 
depicted in FIG. 5, where lines 11,12 and 1 3 represent 35 
the registration process as described in connection with 
FIG. 2. 

It may be observed that the cellular telephone fol- 
lows a slightly different protocol in FIG. 5 than the pro- 
tocol of normal telephone connections. Specifically, in- 40 
stead of sending merely the called party's telephone 
number (MIN3) and waiting for an indication from the 
base station that the called party answered, the RANDX 
and B-Key(RANDX) strings are immediately appended. 
This is easily accomplished in the cellular telephone by 
selecting sequence that the cellular telephone can read- 
ily recognize (and which does not correspond to an oth- 
erwise valid string), e.g. "*8", followed by the user-sup- 
plied RANDX string. 

In the alternative, cellular telephone 10 can send 50 
the MIN3 as expected, wait for a clear-to-send signal, 
and then forward the remainder of the sequence. 

In an embodiment that does not involve telecommu- 
nication, the cellular base station is still involved in the 
sense that the cellular telephone automatically interacts 5S 
with the base station and registers itself as soon as the 
cellular telephone is turned on. Stated in other words, 
like it or not, when the cellular telephone is turned on, it 



registers itself with the base statiom. This activity, nor- 
mally, does not produce a charge aggainst the credit ac- 
count of the cellular telephone's holdier. Beyond this reg- 
istration point, in an embodiment thjat does not involve 
telecommunication the objective is tto open the garage 
door without assistance from the baase station. 

This can be accomplished in a m umber of ways, but 
all require that the signal sent to the I base station follow- 
ing the "go ahead" signal of line 1 3 (iin FIG. 5) should be 
unintelligible to the base station. Comversely the garage 
door receiver should be tuned to thaat transmission from 
the cellular telephone and should umderstand the trans- 
mission. This can be achieved, for esxample, by the ga- 
rage door receiver eavesdropping opn the base station's 
"go ahead" transmission that instruccts the cellular tele- 
phone to operate at a particular f reqiuency The receiver 
can then tune itself to that same f recquency and capture 
the cellular telephone's transmissiom. As shown in FIG. 
6, when cellular telephone 10 then jsends the signal of 
line 25 in FIG. 5, the receiver interccepts it, deciphers it, 
and the garage door responds accordingly In such an 
embodiment, MN3 would be a strtnig that is not recog- 
nized by the base station, or AUTHR would be deleted, 
or merely altered, to cause a rejectioon by the base sta- 
tion. Alternatively when the "*8" sesquence is inserted 
into cellular telephone 10, it can tume itself to the fixed 
hailing frequency that is used for reegistration. For such 
a realization, the garage door operner can be perma- 
nently tuned to that hailing frequencsy 

It may be mentioned in passing the above-present- 
ed example of opening a garage cHoor is just that: an 
example. Other control applications;, such as unlocking 
a car's door or one's house, activatimg an alarm, etc. are 
all within the scope of this invention]. 

3. Extended Control 

Having gained the desired accejss to the home, the 
holder of a cellular telephone 1 0 may/ wish to control var- 
ious appliances. In such an applicaition. security is not 
the concern it was in the two applications disclosed 
above. Also, from a public policy sttandpoint it may be 
desirable to not involve the base staation is such control 
applications. The latter can be effecteed by simply chang- 
ing the operating frequency of the ceellular telephone to 
a band that is not covered by the baase stations. In op- 
eration, each home can have its own home controller 
base station that operates at a S5elected frequency. 
Through a switch or a "punched ini" code, the cellular 
telephone can be placed in a "homie controller" mode, 
and in that mode the cellular telephcone interacts solely 
with the home controller base. The hcome controller base 
can then perform whatever controls5 are assigned to it, 
using conventional techniques. TThe authentication 
process can still take place, as beforre, but under control 
of the home controller base stationj. That is, the home 
controller base can include the capatbility to authenticate 
the cellular telephone qua home comtroller but it doesnt 
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have to, or it can selectively do so, based on the desired 
interaction. For example, the cellular telephone qua 
home controller can be used to change TV channels, 
and for that, perhaps, some security measures may be 
desired; but it can also be used to interact with the sup- 
plier of the television signals, for which security may not 
be sought. Purchases can be made through such inter- 
actions, and the owner of a home controller base may 
not mind having a visitor use the home controller base 
as a conduit. The arrangement disclosed above is Illus- 
trated in FIG. 7, which includes a home base station 60. 
various home controllers 61 that control appliances, for 
example, a television "set top box" 62, a television 63 
and means 64 for interacting with a supplier of goods 
and/or sen/ices that are advertised on the television. 
Such means may be the portion of the set top box that 
sends signals back to the supplier of the television sig- 
nals (so depicted), but it doesnl have to be. 

It should be noted that the principles disclosed here- 
in are not limited to cellular telephones. Any wireless 
means can achieve the capabilities that are disclosed 
herein as long as such means has the authentication 
capabilities that are appropriate for the application at 
hand; and as indicated above, for some applications the 
desired authentication capabilities are not significant or 
unneeded at all. 



ices to the communication devicce. 

6. The method of claim 4 wherein t^he granting of credit 
is by a party other than the partly that provides tel- 

s ecommunication services to tthe communication 
device. 

7. The method of claim 1 wherein tthe action on behalf 
of the user is the transmission - of a secure control 

10 signal to a specified destinationi. 

8. The method of claim 1 wherein tthe action on behalf 
of the user is the transmission cof a control signal to 
a destination. 

IS 

9. The method of claim 8 where tthe destination is a 
home controller base station. 

10. The method of claim 8 where tthe destination is a 
20 home controller base station tltiat interacts with a 

party that provides signals to a television set. 

1 1 . The method of claim 4 wherein ^aid step of granting 
credit includes transmitting toi a credit-providing 

25 center a string that includes a traansaction password 
substring, a credit amount sutbstring, an ID sub- 
string, and a validation substrinjg. 



Claims 

1. A method for securing action on behalf of a user, 
comprising the steps of: 

activating a wireless communication device 
that is adapted for telecommunication; 

based on signals emitted by the communica- 
tion device, authenticating the identity of the com- 
munication device; and 

performing a specified action authorized by 
the wireless communication device. 

2. The method of claim 1 wherein the step of authen- 
ticating employs a protocol that, at least in part, cor- 
responds to at least a part of a registration protocol 
employed by the communication device when that 
communication device is used in telecommunica- 
tion applications. 

3. The method of claim 1 wherein the step of authen- 
ticating employs a protocol that, at least in part, cor- 
responds to a registration protocol employed by the 
communication device when that communication 
device is used in telecommunication applications. 



12. An arrangement for providing ctredit to a first party 
30 for the benefit of a second party, > where the first party 

has a wireless telephone and ai relationship with a 
credit-providing center comprisiing: 

first means for identifyincg the wireless tele- 
phone to the credit center usimg an identification 
35 protocol that comports with the i identification proto- 
col used by the wireless telephorne for wireless com- 
munication; 

second means for associaating with the wire- 
less telephone identified by saidi first means a credit 
40 sum and an identification of saicd second party; and 

third means for the credit cienter communicat- 
ing an approval status to said stecond party 

13. The apparatus of claim 12 whferein essential ele- 
45 ments of said first means, secopnd means and third 

means are under control of ssaid credit-providing 
center. 

14. The arrangement of claim 12; wherein said first 
50 means comprises a cellular telejphone base station 

and a communication link betwesen the base station 
and the credit center 



35 



4. The method of claim 1 wherein the action on behalf 

of the user is the granting of credit to the user. 55 

5. The method of claim 4 wherein the granting of credit 
is by a party that provides telecommunication serv- 



15. The arrangement of claim 12: wherein said first 
means comprises transmissi^on apparatus on 
premises of said second party for communicating 
with the credit center. 
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16. The arrangement of claims 15 wherein the trans- 
mission apparatus on the premises of said second 
party communicates with the credit center via a cel- 
lular telephone base station. 

s 

17. The apparatus of claim 12 wherein essential ele- 
ments of said first means, second means, and third 
means are located on the premises of said second 
party. 

10 

18. The arrangement of claim 17 wherein said first 
means further comprises a receiver for communi- 
cating with said wireless telephone. 

19. The arrangement of claim 18 further comprising '5 
means for discriminating transmission from said 
wireless telephone from transmissions from other 
wireless telephones. 

20 
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FIG. 2 
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